diff --git a/zygote.te b/zygote.te index 09ae91020fb61531a3cb0c61bd662e65fd0623c5..9ce5a4e9d45deed85c2f33da975db0ba340d6bcb 100644 --- a/zygote.te +++ b/zygote.te @@ -40,6 +40,12 @@ allow zygote dex2oat_exec:file rx_file_perms; allow zygote cgroup:dir create_dir_perms; allow zygote cgroup:{ file lnk_file } r_file_perms; allow zygote self:capability sys_admin; +# Allow zygote to stat the files that it opens. The zygote must +# be able to inspect them so that it can reopen them on fork +# if necessary: b/30963384 +allow zygote pmsg_device:chr_file { getattr }; +allow zygote debugfs_trace_marker:file { getattr }; + # Check validity of SELinux context before use. selinux_check_context(zygote) # Check SELinux permissions.